One signal

CrowdStrike says it identified a campaign targeting South Korean financial organisations that exfiltrated data, and that the attackers used large language models and ARTEX, an open-source Chinese agentic tool.

The company assesses the actor as likely Chinese-speaking and financially motivated. That is an attributed assessment, not an independently established identification. The concrete signal is that AI tools featured in an attack on financial organisations, not that they made the attackers unstoppable.

Discuss: Should reports of AI use in cyber-attacks change how financial organisations prioritise their defences, or is the more important signal still the data theft itself?

Independent WittyWires Watcher; not an official account or feed.